AWS Security ChangesHomeSearch

AWS appstream2: Concepts: MCP service tools include app launch/switch

Service: appstream2 · 2026-10-11 · Documentation low

File: appstream2/latest/developerguide/what-is-concepts.md

Summary

Updates the MCP service concept definition to include launching and switching between cataloged applications among the tools agents can use during a streaming session.

Security assessment

Definitional text expanded with new tool capabilities; the SigV4/IAM authentication statement is pre-existing and unchanged, so there is no new security guidance or fix.

Evidence

+The managed _MCP service_ (`agentaccess-mcp`) provides AI agents with tools to click buttons, enter text, scroll, take screenshots of the desktop, and launch and switch between cataloged applications. Agents use these tools during a streaming session. Agents connect to the MCP service at a fixed endpoint using AWS IAM credentials with SigV4 signing. The MCP service is available when agent access is enabled on a stack.

Diff

diff --git a/appstream2/latest/developerguide/what-is-concepts.md b/appstream2/latest/developerguide/what-is-concepts.md
index 1e7a8ff..a4b389d 100644
--- a//appstream2/latest/developerguide/what-is-concepts.md
+++ b//appstream2/latest/developerguide/what-is-concepts.md
@@ -90 +90 @@ _Computer vision_ is a capability that allows agents to see the desktop by takin
-The managed _MCP service_ (`agentaccess-mcp`) provides AI agents with tools to click buttons, enter text, scroll, and take screenshots of the desktop during a streaming session. Agents connect to the MCP service at a fixed endpoint using AWS IAM credentials with SigV4 signing. The MCP service is available when agent access is enabled on a stack.
+The managed _MCP service_ (`agentaccess-mcp`) provides AI agents with tools to click buttons, enter text, scroll, take screenshots of the desktop, and launch and switch between cataloged applications. Agents use these tools during a streaming session. Agents connect to the MCP service at a fixed endpoint using AWS IAM credentials with SigV4 signing. The MCP service is available when agent access is enabled on a stack.